27 lines (17 loc) · 548 Bytes

ADR-005: Keycloak as Identity Provider

Status: Accepted

Date: 2026-01-25

Context

Need for centralized authentication for platform tools and services.

Decision

Adopt Keycloak as IdP per environment.

Rationale

Open source and widely adopted
Support for OIDC, OAuth2, SAML
Identity federation (LDAP, AD, social)
Customization of authentication flows
Native integration with Istio for JWT validation

Consequences

Need for RDS PostgreSQL per environment
Realm and client management
Keycloak backup and DR